A DJI drone may keep hovering in the air while a nearby attacker, without any password, alters its connectivity settings, reboots the aircraft, or attempts to sever the pilot from control. The pro…

A catastrophic vulnerability that lurked silently within the Linux kernel for nearly 14 years is now actively weaponized in real-world cyberattacks, alongside two other critical errors. The United…

TL;DR On September 22, 2026, WordPress addressed a critical security flaw tracked as CVE-2026-87902. Security researchers confirmed that threat actors are actively targeting this critical WordPres…

TL;DR Zoho Corporation patched six critical ManageEngine security vulnerabilities across its network monitoring portfolio. These severe flaws allow remote code execution and unauthorized command i…

A brief documentation of the rooting process for the Infinix Hot 12i X665B.

The productivity gain is real. So is the debt you’re not tracking.

Training a large language model from scratch requires trillions of tokens, massive compute infrastructure, and a budget that can reach tens…

Manual Discovery — Common Files

Day 2 was mostly about going deeper with reconnaissance.

Gambit Security found AI agents breached 27 companies, stole 600,000 credit card records and installed payment skimmers across compromised retail sites.

How a simple response manipulation allowed me to continue registration without a valid OTP

A story about a forgotten CNAME record, a platform that trusts you a little too much, and why “it’s just a subdomain” is the wrong way to…

A researcher searched a dark web database with no query at all — just hit “search” — and got back 11.5 million pages of results.

The Login Field That Could Hand Attackers Root on Your Firewall’s Brain

It was 2 a.m. when a SOC analyst noticed something small but wrong: a configuration file on a backup server had a modified timestamp — but…

Modern web applications increasingly generate images dynamically for social media previews, Open Graph metadata, dashboards, personalized…

An AWS environment is more than a list of public IPs. A useful attack-surface map connects accounts, regions, resources, identities…

Access room: https://tryhackme.com/room/portaldrop

Cyber Safety